Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: lOePQdHQ5OI7ek7Rd1R3kJ4kEXugQ2us5uks+mrN4XQ=
Subject key identifier: D1:A2:14:B0:27:C0:F9:B3:A7:89:53:90:E2:EF:E2:83:DD:C1:C5:F0
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019CB05AF46846269344568DD17DA4EB8C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1562
Signing time: Mon 02 Mar 2026 21:01:16 +0000
Manifest this update: Mon 02 Mar 2026 21:01:16 +0000
Manifest next update: Tue 03 Mar 2026 21:01:16 +0000
Files and hashes: 1: OBXirIBylsu5hF24eFc4dWHtfUA.roa (hash: V67fHNvga440B5p2S4z73zdpX5hKFuY2GyqyJaC4HdU=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: f1w+/ZpiaED7yNUvKy2HewdZ+A5Xsuoaz2s3xLPeWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:f4:68:46:26:93:44:56:8d:d1:7d:a4:eb:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Mar 2 21:01:16 2026 GMT
Not After : Mar 3 21:01:16 2026 GMT
Subject: CN=d1a214b027c0f9b3a7895390e2efe283ddc1c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:a6:b0:74:6f:92:c1:d7:e5:e2:6d:82:98:
34:13:9a:27:71:2e:5c:c2:d5:61:4a:f4:fe:e8:a0:
8a:c6:bd:c8:47:b0:9f:b1:9d:cb:29:67:20:49:29:
38:dc:54:8d:9f:fb:ca:3e:97:c7:7a:84:e4:e2:29:
a6:a2:57:2c:ea:a4:07:9f:1f:4f:16:c8:70:d5:40:
36:06:3c:35:d0:53:26:4d:a8:81:03:a6:e9:7d:8e:
0e:d7:c2:5f:94:20:d1:80:41:38:b1:fa:08:34:a0:
55:90:80:f0:08:1c:d5:f4:63:1a:3b:6f:1a:ba:06:
ad:92:5c:11:55:19:d7:65:8c:fb:81:78:86:71:9f:
8c:bf:5f:da:e6:5c:62:65:79:3a:17:3e:ce:1b:73:
0c:4e:b0:74:36:e3:39:b5:d4:69:99:5c:71:50:da:
5d:59:e0:0d:ed:cc:69:b4:5b:7a:21:20:a8:a9:08:
e1:b3:59:5e:89:f4:d1:ff:35:99:f8:aa:9e:66:19:
dd:a9:ae:ab:89:e2:89:31:e6:88:da:d6:cc:90:a4:
7c:e1:25:31:cb:1c:ab:29:83:8a:72:15:d5:a6:5b:
fd:e0:62:5f:ee:d9:cf:12:96:22:d7:e9:5e:3b:c0:
09:49:64:cb:58:26:4f:4a:06:60:08:43:e1:a6:da:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:14:B0:27:C0:F9:B3:A7:89:53:90:E2:EF:E2:83:DD:C1:C5:F0
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ed:88:12:d7:f1:0b:16:9a:dd:47:f2:5e:79:1d:dd:23:84:
c5:17:3d:98:da:48:b4:00:c3:7c:7a:35:f9:a7:42:ac:1a:31:
2e:f4:13:06:8d:70:75:e0:99:3c:04:1e:ef:c7:ed:61:6c:ca:
31:bd:ee:3a:c1:4e:b9:86:e1:da:62:79:29:cf:c9:52:bb:58:
4e:86:5f:9a:1a:5a:69:72:06:22:04:de:c5:b6:99:f2:a4:0c:
8a:8f:2e:86:07:94:85:f8:aa:48:a0:16:92:82:19:af:ad:e0:
a2:c8:1a:2a:f2:f0:27:4e:b6:c5:61:16:61:69:74:47:09:06:
7b:d2:55:2c:5a:d4:c8:80:0f:68:74:cc:03:6c:ea:71:e0:81:
5d:33:e5:26:4f:f4:41:8e:51:55:0a:f9:07:19:86:fe:50:e6:
17:52:92:d4:ef:d7:41:de:f7:a1:2a:57:e4:cd:15:ee:c9:13:
2e:9d:6a:d4:7a:0c:8a:e1:8b:2d:f4:af:7c:ea:98:85:79:a1:
25:38:68:99:b3:16:5c:57:11:fa:9b:7a:2b:5a:19:6a:4c:ac:
d7:af:6b:eb:c5:a3:cc:d6:00:20:85:3f:a7:dc:6d:14:a4:da:
f7:03:a8:b5:58:3a:c4:ca:a4:41:7c:f7:fb:0b:d5:b4:65:e8:
d6:4c:5e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:25 2026 by rpki-client